$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json) Hash identifier: J0txdw8Iraq4gQVQMh3N+WaJH7XT4r/BcwOVPtl8ajo= Subject key identifier: 58:4A:7F:4E:18:BE:BF:00:7C:77:37:2F:21:08:95:6A:B6:B3:95:85 Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft Manifest number: 01D2 Signing time: Tue 25 Aug 2026 03:38:37 +0000 Manifest this update: Tue 25 Aug 2026 03:38:36 +0000 Manifest next update: Tue 01 Sep 2026 03:38:36 +0000 Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: z7xFB5FR8N3p0AIBL0Dq3ULp4AMHxL+k4xHIcfD3LSI=) 2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: VkTWZOhptlmUjpj+fKDaWZKr/by4lrIHVYy8lO2gJqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 03:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4 Validity Not Before: Aug 25 03:38:36 2026 GMT Not After : Sep 1 03:38:36 2026 GMT Subject: CN=6a8d0e3d-cb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:21:c0:e8:35:37:f3:c8:4d:2f:2e:88:32:fb: 22:4b:e0:33:ad:9e:33:77:ae:8f:ae:a5:8c:20:88: 78:94:07:e2:f8:d5:73:d3:a5:2f:7b:84:0b:87:bc: 4c:3d:dc:53:29:1a:8f:f8:02:b5:05:3f:6c:39:f2: 8b:1c:a9:20:bd:17:13:5c:b5:9c:41:fb:5c:c6:b4: 00:bc:63:b0:3d:97:26:3c:c3:04:89:be:8d:f1:d9: c1:4b:b8:0c:16:c4:3b:af:97:27:a3:13:73:22:b5: a1:e5:c4:22:6a:c3:db:fe:88:c8:23:4d:93:6f:67: a4:7a:0a:1f:81:f1:b2:b9:f0:a1:d1:32:32:45:8a: 37:98:bb:c2:2c:d5:7e:31:71:0d:3a:98:d0:d2:71: 63:95:3f:4b:59:c7:31:09:55:43:38:b0:e5:8b:37: b3:08:ef:81:b0:69:cc:3f:01:5d:b0:44:2e:25:ce: 12:b9:f9:02:7f:bb:b9:c1:ea:54:f3:6d:24:f7:04: 6e:af:f2:03:0c:de:1a:ec:18:25:a2:cd:46:80:42: 3f:d8:75:9c:6b:3d:6a:f4:89:aa:a6:08:48:20:38: 12:4e:89:5a:21:2f:69:35:64:62:bd:50:7d:1c:c4: a7:0d:1b:94:ef:ef:23:5d:e1:11:29:08:27:86:d7: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4A:7F:4E:18:BE:BF:00:7C:77:37:2F:21:08:95:6A:B6:B3:95:85 X509v3 Authority Key Identifier: keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:8b:eb:51:c6:61:b9:a0:49:66:1b:72:89:34:a9:09:fe:27: aa:01:ac:7d:22:f3:7d:51:9a:51:14:75:c5:95:56:8e:2f:05: 98:12:01:b7:b1:02:86:06:ca:a5:cc:1c:7a:47:b3:10:1d:7a: f6:cf:1b:2d:cc:4c:9b:c0:9e:b6:f6:3b:a8:c0:cf:c7:f2:fd: a8:66:8e:69:36:15:e8:c5:a8:3b:88:df:a3:13:17:33:22:37: c7:e2:3d:ba:2a:29:27:8f:cc:5b:68:a7:3d:c4:08:c0:70:2a: 29:2e:31:69:1b:1c:90:20:7c:9b:d3:ec:99:be:bf:b4:fc:1b: eb:1e:65:39:ee:84:b2:4d:0c:84:de:99:00:60:4d:5e:24:ed: 53:f7:77:ed:60:06:2c:1c:05:01:3b:57:68:78:92:39:c2:f0: e9:e5:b5:9e:b3:8b:fe:c6:8b:7a:4a:99:d0:30:2a:1e:70:b8: 63:41:b3:69:63:ee:51:ea:ac:7e:7a:f2:e0:99:3d:a7:60:c5: 4f:58:8b:96:db:68:75:bf:e3:3a:3d:be:69:19:52:1c:3c:3f: af:b9:3e:b9:8a:d7:4e:a5:73:79:0c:cd:d5:20:fe:da:1e:a7: 11:0e:3b:7e:26:e3:e6:59:9a:43:d2:89:ec:6f:8b:91:76:e5: ea:07:df:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy NDlDQ0M4RjQwHhcNMjYwODI1MDMzODM2WhcNMjYwOTAxMDMzODM2WjAYMRYwFAYD VQQDEw02YThkMGUzZC1jYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliHA6DU388hNLy6IMvsiS+AzrZ4zd66PrqWMIIh4lAfi+NVz06Uve4QLh7xM PdxTKRqP+AK1BT9sOfKLHKkgvRcTXLWcQftcxrQAvGOwPZcmPMMEib6N8dnBS7gM FsQ7r5cnoxNzIrWh5cQiasPb/ojII02Tb2ekegofgfGyufCh0TIyRYo3mLvCLNV+ MXENOpjQ0nFjlT9LWccxCVVDOLDlizezCO+BsGnMPwFdsEQuJc4SufkCf7u5wepU 820k9wRur/IDDN4a7Bglos1GgEI/2HWcaz1q9ImqpghIIDgSTolaIS9pNWRivVB9 HMSnDRuU7+8jXeERKQgnhtdHGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhKf04Y vr8AfHc3LyEIlWq2s5WFMB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54 ajl5QzB3QjZuVFFrbk15UFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoIvrUcZhuaBJZhtyiTSpCf4nqgGsfSLzfVGaURR1xZVWji8FmBIBt7EChgbK pcwcekezEB169s8bLcxMm8CetvY7qMDPx/L9qGaOaTYV6MWoO4jfoxMXMyI3x+I9 uiopJ4/MW2inPcQIwHAqKS4xaRsckCB8m9Psmb6/tPwb6x5lOe6Esk0MhN6ZAGBN XiTtU/d37WAGLBwFATtXaHiSOcLw6eW1nrOL/saLekqZ0DAqHnC4Y0GzaWPuUeqs fnry4Jk9p2DFT1iLlttodb/jOj2+aRlSHDw/r7k+uYrXTqVzeQzN1SD+2h6nEQ47 fibj5lmaQ9KJ7G+LkXbl6gffDg== -----END CERTIFICATE-----Generated at Wed Aug 26 10:39:00 2026 by rpki-client